PT-2009-3160 · Ibm · Ibm Websphere Process Server

Publicado 2009-02-26 · Atualizado 2017-08-08 · CVE-2009-0507

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Process Server (WPS) versions 6.1.2 through 6.1.2.2 IBM WebSphere Process Server (WPS) versions 6.2 through 6.2.0.0

Description The issue allows remote authenticated users to obtain cleartext passwords, including JMSAPI, ESCALATION, and MAILSESSION (also known as mail session), by accessing a cluster member. This occurs because configuration data is not properly restricted during the export of the cluster configuration file from the administrative console.

Recommendations For IBM WebSphere Process Server (WPS) versions 6.1.2 through 6.1.2.2, update to version 6.1.2.3 or later. For IBM WebSphere Process Server (WPS) versions 6.2 through 6.2.0.0, update to version 6.2.0.1 or later.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2009-0507

Produtos afetados

Ibm Websphere Process Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2009-0507 · Nota de Segurança
• http://secunia.com/advisories/34249 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/0670 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg27015580 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48892 · Nota